What is Detectify?
Detectify Labs
A security research blog
App Security
Writeups
How to
Crowdsource
How I exploited ACME TLS-SNI-01 issuing Let’s Encrypt SSL-certs for any domain using shared hosting
Most read articles
How I made LastPass give me all your passwords
»
Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token
»
Chrome Extensions – AKA Total Absence of Privacy
»
Security Questions are not secure
Amazon
PayPal
Public Information
Security Questions
Get research and tips from Detectify security experts and the Crowdsource hacker community
Subscribe to the Detectify Monthly Round-up
Guest Blog: Don’t Leave your Grid Wide Open
Detectify Crowdsource
Peter Jaric
Selenium Grid
TrackMania – a Chrome plugin to stalk your friends on Tinder
Chrome
privacy
Tinder
Guest blog: Bypassing domain control verification with DNS response spoofing
Detectify Crowdsource
DNS spoofing vulnerability
Dissecting the Chrome Extension Facebook malware
Chrome
Chrome extensions
Facebook
Frans Rosén
XSS
How we invented the Tesla DOM DOOM XSS
Tesla
XSS
A deep dive into AWS S3 access controls – taking full control over your assets
AWS
bug bounty
Frans Rosén
privacy
XSS
How I found a persistent XSS affecting thousands of career sites
Detectify Crowdsource
Persistent XSS
Team Tailor
XSS
BountyDash – A local bug bounty statistics dashboard
bug bounty
Frans Rosén
Github
Mathias Karlsson
« Previous
1
…
3
4
5
6
7
…
11
Next »
Start securing your web apps with tech powered by Detectify Crowdsource hackers
Start a 2-week free trial of Detectify and go hack yourself
